security Why a Strong Security Culture?

[Future Sensors]

Why a Strong Security Culture?

What is the value of security culture to an organization’s mission?

People often discuss the importance of a strong security culture but fail to define what they mean by security culture, and even more importantly, why is it so important, what is the value culture to an organization’s mission? Culture is defined as peoples shared attitudes, perceptions and beliefs. A common metaphor is comparing culture to an iceberg. Like an iceberg, culture is hard to see as most of it is hidden. Like an iceberg, culture is also hard to move.​

Read more:

https://www.sans.org/blog/why-strong-security-culture/

About the author

Lance Spitzner has over 20 years of security experience in cyber threat research, security architecture and awareness training and is a SANS Senior Instructor. He helped pioneer the fields of deception and cyber intelligence with his creation of honeynets and founding of The Honeynet Project. In addition, Lance has published three security books, consulted in over 25 countries, and helped over 350 organizations build awareness programs to manage their human risk. He is also on the Board of Advisors for Attivo Networks. Lance is the author and an instructor for MGT433: Managing Human Risk: Mature Security Awareness Programs, and MGT521: Leading Cybersecurity Change: Building A Security-Based Culture, and built the SANS Security Awareness business unit from the ground up over the past 10 years. With the catalyst of COVID-19, Lance created multiple resources for securing humans from home, from those working remotely for the first time or managing newly remote teams, to children learning and playing online.​